Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OAuth2: Restart local socket after an error occured #9196

Closed
michaelstingl opened this issue Nov 3, 2021 · 3 comments
Closed

OAuth2: Restart local socket after an error occured #9196

michaelstingl opened this issue Nov 3, 2021 · 3 comments
Labels
bug p2-high Escalation, on top of current planning, release blocker
Milestone

Comments

@michaelstingl
Copy link
Contributor

Expected behaviour

Login attempt after "Error returned from the server: code verifier invalid" should succeed.

Actual behaviour

Invalid redirect URI with localhost:0 is generated

Steps to reproduce

  1. Login to demo.owncloud.com with user demo:demo in system browser
  2. Add new server account with demo.owncloud.com to desktop client
  3. "Switch User" in web UI (OAuth 2.0 app)
  4. Login with user test:test in web UI
  5. "Authorise" in web UI, to authorise desktop client
    ==> Login Error Error returned from the server: code verifier invalid
  6. Go back to desktop client, click "Re-open Browser"
    ==> New URL contain invalid redirect URI with localhost:0

Server configuration

curl https://demo.owncloud.com/status.php
{"installed":true,"maintenance":false,"needsDbUpgrade":false,"version":"10.8.0.4","versionstring":"10.8.0","edition":"Enterprise","productname":"ownCloud"}

Client configuration

testpilotcloud 2.9.1 (build 5501) 42fb29 Oct 13 2021 10:57:21
Libraries Qt 5.12.11, OpenSSL 1.1.1k 25 Mar 2021
Using virtual files plugin: suffix
osx-21.1.0

Related: owncloud/oauth2#309

@github-actions
Copy link

github-actions bot commented Dec 4, 2021

This issue was marked stale because it has been open for 30 days with no activity. Remove the stale label or comment or this will be closed in 7 days.

@github-actions github-actions bot added the Stale label Dec 4, 2021
@TheOneRing
Copy link
Member

Turned out to not be a client issue.

@TheOneRing TheOneRing reopened this Dec 6, 2021
@TheOneRing TheOneRing changed the title OAuth 2.0 login session broken after "Error returned from the server: code verifier invalid" OAuth2: Restart local socket after an error occured Dec 6, 2021
@TheOneRing TheOneRing removed the Stale label Dec 6, 2021
@TheOneRing TheOneRing modified the milestones: 2.11.0, 2.10.0 Dec 6, 2021
@TheOneRing TheOneRing added p1-urgent Consider a hotfix release with only that fix (ex: lose trust, money, security issue, ...) p2-high Escalation, on top of current planning, release blocker and removed p1-urgent Consider a hotfix release with only that fix (ex: lose trust, money, security issue, ...) labels Dec 8, 2021
TheOneRing added a commit that referenced this issue Dec 10, 2021
TheOneRing added a commit that referenced this issue Dec 10, 2021
TheOneRing added a commit that referenced this issue Dec 10, 2021
@saw-jan
Copy link
Member

saw-jan commented Dec 30, 2021

@michaelstingl, I have tested this behavior manually as of #9290 (comment)
My findings:

  • ❗ step 5 has the same error message Login Error Error returned from the server: code verifier invalid redirected to localhost:
  • ✔️ step 6 redirects to the correct server URL not to localhost

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug p2-high Escalation, on top of current planning, release blocker
Projects
None yet
Development

No branches or pull requests

3 participants